Cortex Toolbox
Ingest Calculator
Platform Changes
Detectors ▾
All detectors
Statistics
ATT&CK matrix
Analytics Alerts
BIOCs
Correlation Rules
Content ▾
Packs
Integrations
MCP Servers
Threat Feeds
Reputation Commands
Automation
Playbooks
Scripts
Jobs
Automation Rules
Lists
Case and Issue Setup
Incident Fields
Layouts
Layout Rules
Threat Intelligence
Indicator Types
Indicator Fields
Reputation Commands
Threat Feeds
Data Ingestion
Parsing Rules
Modeling Rules
XDRC Templates
Dashboards & Reports
XSIAM Dashboards
XSIAM Reports
Docs ▾
Documentation
XDM Explorer
Cortex Versions
Settings ▾
Theme
System
Light
Dark
Show test playbooks
Show deprecated content
Show superseded versions
Show legacy XSOAR content
Show generic objects
Sign in
Layout Rules
15 rules choosing which layout a matching alert opens in.
Download CSV
Name
Layout
Conditions
Pack
Version
ASM Layout Rule
ASM Alert Layout
1
Cortex Attack Surface Management
6.10.0
Access Layout Rule
Access Incident
1
Access Investigation
6.10.0
Cloud Alerts Layout Rule
Cloud Alerts
2
Cloud Incident Response
6.10.0
Employee Health Check Layout Rule
Employee Health Check Incident
1
Crisis Management
6.10.0
Identity Analytics Alerts Layout Rule
Identity Analytics Alerts
1
Core
6.10.0
Indicator Feed Layout Rule
Indicator Feed Incident
1
Common Types
6.10.0
IronDefense Alert Notification Layout Rule
IronDefense Alert Notification
1
IronNet
6.10.0
IronDefense Event Notification Layout Rule
IronDefense Event Notification
1
IronNet
6.10.0
IronDome Notification Layout Rule
IronDefense IronDome Notification
1
IronNet
6.10.0
Phishing Layout Rule
Phishing Layout
1
Phishing
6.10.0
Prisma Cloud Compute - Audit Alert v3 Layout Rule
Prisma Cloud Compute Audit Layout v3
1
Prisma Cloud Compute by Palo Alto Networks
6.10.0
Prisma Cloud Compute - Compliance Alert v2 Layout Rule
Prisma Cloud Compute Compliance Incident v2
1
Prisma Cloud Compute by Palo Alto Networks
6.10.0
Prisma Cloud Network API and Anomaly
Prisma Cloud - Network API and Anomaly Incident Layout
1
Prisma Cloud by Palo Alto Networks
6.10.0
Prisma Cloud V2 Layout Rule
Prisma Cloud V2
1
Prisma Cloud by Palo Alto Networks
6.10.0
Vulnerability Layout Rule
Vulnerability Incident
1
Common Types
6.10.0